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A METHOD AND SYSTEM FOR DISTRIBUTING SOFTWARE FEATURES TO 

A COMPUTER 

Field of Invention 

The present invention relates to a method and system 
for distributing software features to a computer. 

Background of the Invention 

Distribution of software features (such as new 
software products or new versions thereof) is a common 
activity in a data processing system. A typical case is 
that of a network with a great number of workstations, 
wherein a software configuration of each workstation is 
periodically updated; for example, the software products 
installed on the workstation are upgraded, or the 
software configuration of the workstation is modified to 
comply with a profile or organisational change. 

Different software distribution applications have 
been proposed in the last years to assist a system 
administrator in efficiently managing deployment of the 
new software configurations to (client) workstations of 
the network. A software distribution application runs on 
a server workstation of the network and controls building 
of packages including the software products to be 
installed and instructions understandable by the client 
workstations. Each package is distributed to the 
respective client workstation through the network; the 
instructions embedded in the package cause the software 
products to be automatically installed or removed in 
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order to reach the desired software configuration of the 
client workstation. 

Several types of operating systems running on the 
client workstations allow different user profiles to be 
defined. As a consequence, a user can log onto the 
workstation with a selected profile, and then work in a 
corresponding desired context. The context defines an 
operating environment specific for the user, for example 
with different software products available, operations to 
be executed automatically, shortcuts on a desktop, 
personal configuration parameters, authorisation for 
using system resources or for executing certain 
operations, and the like. 

The solutions known in the art do not manage the 
above-described scenario in a satisfactory manner. 
Particularly, no support is provided to the administrator 
for setting specific software configurations for the 
various users of the workstations. In fact, an agent of 
the software distribution application usually runs in a 
context of a privileged profile, in order to have all the 
authorisations needed to install or remove the software 
products. However, the configuration information for a 
specific context cannot be modified from a different 
context for security reasons, not even if the different 
context is associated with the privileged profile. 
Therefore, the software distribution application is 
unable to define software configurations customised for 
the different users. 
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It is an object of the present invention to overcome 
the above-mentioned drawbacks. In order to achieve this 
object, a method as set out in the first claim is 
proposed. 

Disclosure of the Invention 

Briefly, the present invention provides a method of 
distributing software features to a computer being 
accessible with a plurality of different user profiles 
each one associated with a corresponding operating 
context, the method including the steps of providing a 
distribution package including at least one item 
indicative of an activity for enforcing a corresponding 
software feature on the computer, at least one activity 
being defined as a user activity associated with at least 
one user profile, storing an indication of the at least 
one user activity on the computer, accessing the computer 
with a current user profile, and retrieving and executing 
each user activity associated with the current user 
profile in the corresponding operating context. 

Moreover, the present invention also provides a 
computer program for performing the method, a product 
storing the program, and a corresponding system for 
distributing software features. 

Brief Description of the Drawings 

Further characteristics and the advantages of the 
solution according to the present invention will be made 
clear by the following description of a preferred 
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embodiment thereof, given purely by way of a 
non-restrictive indication, with reference to the 
attached figures, wherein: 

Fig.l is a basic block diagram of a networking 
system in which the method of the invention can be used; 

Fig. 2 shows a partial content of a working memory of 
a client workstation included in the networking system; 

Figg.3a-3b are a flow chart of a method for managing 
distribution of software features to the client 
workstation. 

Description of the Preferred Embodiments 

With reference in particular to Fig. 1, there is 
shown a networking system 100, for example a LAN (Local 
Area Network) . The LAN 100 if formed by a plurality of 
workstations 105, typically consisting of PCs (Personal 
Computers) . The workstations 105 are connected to one or 
more concentrators 110 (such as hubs) through respective 
communication cables 115. The networking system 100 has a 
client/server architecture, wherein one or more of the 
workstations 105 (generally consisting of powerful 
computers) manage network resources, such as shared files 
and devices; the other workstations 105 operate as 
clients on which users run applications relying on server 
resources . 

Each workstation 105 includes several units, which 
are connected in parallel to a communication bus 120. In 
particular, a central processing unit (CPU) 125 controls 
operation of the workstation 105, a working memory 130 
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(typically a DRAM) is used directly by the CPU 125, and a 
read-only memory (ROM) 13 5 stores a basic program for 
starting the workstation 105. Various peripheral units 
are further connected to the bus 12 0 (by means of 
respective interfaces) . Particularly, a bulk memory 
consists of a hard-disk 14 0 and of a driver unit (DRV) 
145 for reading CD-ROMs 150; the workstation 105 further 
includes an input unit (IN) 155, which consists for 
example of a keyboard and a mouse, and an output unit 
(OUT) 160, which consists for example of a monitor. A 
network interface card (NIC) 165 is used to connect the 
workstation 105 to the concentrator 110 (through the 
communication cable 115) . 

Similar considerations apply if the networking 
system has a different topology, if the networking system 
includes different components (such as one or more 
switches) , if the networking system consists of a WAN 
(Wide Area Network) , if each workstation has a different 
structure (for example with a multi-processor 
architecture) , and the like. 

Considering now Fig. 2, there is shown a partial 
content of the working memory 130 of a client workstation 
to which software features are distributed from another 
workstation operating as a software distribution server; 
the information (programs and data) is typically stored 
on the hard-disk and loaded (at least partially) into the 
working memory 13 0 when the programs are running, 
together with other application programs (not shown in 
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the figure) . The programs are initially installed onto 
the hard disk of the client workstation from CD-ROM. 

The working memory 13 C includes an operating system 
(OS) 2 02 that provides basic services defining a software 
platform for the client workstation, on top of which 
other programs can run. The operating system 2 02 supports 
a multi-user environment. More specifically, the client 
workstation is accessed with a plurality of different 
profiles, each one assigned to a specific user or group 
of users; a single current profile may be enabled at a 
time. A data structure (CONFIG) 2 05 inside a kernel of 
the operating system 202 stores respective configuration 
information for each profile. 

A logon module 210 controls an access to the client 
workstation by each user. The logon module 210 
authenticates the user, requiring a username and a 
password to be entered. Once the user has been 
recognised, a session is started with the respective 
profile that causes the client workstation to work in a 
corresponding operating context; the context defines an 
execution environment specific for the user connected to 
the client workstation (including for example different 
software products available, operations to be executed 
automatically, shortcuts cn a desktop, personal 
configuration parameters, authorisation for using system 
resources or for executing certain operations, and the 
like) . 
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A network interface (NET) 215 is used for exchanging 
information with the server workstation through the 
network. Particularly, the network interface 215 receives 
and stores software distribution packages 220. Each 
package 22 0 consists of a list of items for enforcing 
corresponding software features on the client 
workstation. Each item has a field ACTION, which defines 
an activity consisting of one or more instructions to be 
carried out for reaching 3 desired software 
configuration; for example, the field ACTION specifies 
that a software product (such as an application program) 
must be installed, that another software product must be 
removed, that the software products must be installed or 
remove in an undo able manner, that a configuration 
parameter must be updated, that an icon must be created, 
updated or removed from the desktop, and the like. The 
field ACTION is associated with a flag TYPE, which 
defines the corresponding activity as a global activity 
for the client workstation as a whole or as a (generic) 
user activity for each single profile. The package 220 
further includes one or mere files (SW) containing the 
software products to be installed on the client 
workstation. 

The packages 220 are accessed by a software 
distribution agent ( D I STR_AGENT ) 225. The distribution 
agent 225 runs in a (global) environment outside any 
context associated with a user profile; more 
specifically, it consists of a program that runs 
continuously in the background, until it is activated by 
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the receipt of a package from the server workstation. The 
distribution agent 225 controls a repository 230 of 
software products available on the client workstation. 
Particularly, the distribution agent 225 installs or 
removes a global portion (GLOBAL_SW) of each software 
product; the global portion includes code that must be 
present on the client workstation regardless of the user 
employing the software product. The distribution agent 
225 further controls a global catalogue (GLOBAL_CAT) 235 
storing information about a status of each software 
feature on the client workstation as a whole; for 
example, the global catalogue 235 specifies that the 
global portion of each software product has been 
installed and committed, put in a back-up condition, 
installed in an undoabie manner, removed and committed, 
removed in an undoabie manner, and so on. 

The working memory 13 0 further includes a user agent 
(USER_AGENT) 240; the user agent 240 consists of a 
program performing specific services in the context of a 
corresponding profile. The user agent 240 controls (i.e., 
installs or removes) a user portion (USER_SW) of each 
software product in the repository 230, which user 
portion is necessary for activating the software product 
in the corresponding context. The user agent 24 0 further 
accesses the configuration information 2 05 and the 
packages 220. Moreover, the user agent 240 controls a 
specific user catalogue (USER__CAT) 245 for each profile; 
the user catalogue 245 stores information on the status 
of each software feature in the context associated with 
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the respective profile (for example the condition of the 
user portion of each software product in the context) . 
The user agent 240 also accesses an authorisation list 
250. The authorisation list 250 includes a series of 
records each one consisting of a field ELE identifying a 
software feature and a field AUTH identifying one or more 
profiles allowed to have this software feature enforced. 
The authorisation list 250 is controlled by an 
administrator module (ADMIN) 255, which runs in a context 
associated with a privileged profile (typically assigned 
to a system administrator) . 

Similar considerations apply if the programs and 
data are structured in a different manner, if other 
modules or functions are provided, if the operating 
system supports multiple profiles running simultaneously 
in time sharing, if different software features and 
corresponding actions are envisaged, if the software 
features may be in different conditions, and the like. 

As shown in Figg.3a-3b, each time the client 
workstation is switched on (either locally or remotely 
under the control of the server workstation) , a method 
3 00 is performed. The method 3 00 begins at block 3 03 and 
then passes to block 3 06, wherein a bootstrap process is 
started. The bootstrap involves loading utilities 
providing essential services for the client workstation, 
which in turn control loading and execution of the rest 
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of the operating system. Once the bootstrap has been 
completed, the method forks into two braches that are 
executed in parallel. A first branch consists of blocks 
309-324, and a second branch consists of blocks 327-369; 
the two branches joint at the final block 372. 

Considering now block 3 09, the distribution agent is 
loaded. The distribution agent verifies at block 312 
whether a new package has been received from the server 
workstation. If not, the method returns to block 309 in 
an idle loop. Conversely, the package is stored onto the 
working memory of the client workstation at block 315. 
Considering now block 318, the distribution agent 
executes all the instructions in the respective field 
ACTION of the items defined as global activities by the 
corresponding flag TYPE. In this way, only the global 
activities are executed at a distribution time; on the 
other hand, the user activities are scheduled to be 
executed only when a user logs onto the workstation with 
the corresponding profile (as described in detail in the 
following) . The status information for the software 
features involved is accordingly updated in the global 
catalogue at block 321. The distribution agent then 
checks at block 324 whether the client workstation has 
been shut down. If not, the method returns to block 3 09 
(for repeating the steps described above) ; on the 
contrary, the method ends at the final block 372. 



At the same time, the method loops at block 327 
waiting for a user command. If the client workstation has 
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been shut down, the method ends at the final block 372. 
If a user has requested an access to the client 
workstation, the method passes to block 328, wherein a 
logon process is started. Particularly, the user is 
prompted to enter its usemame and password; once the 
user has been authenticated, the configuration 
information for the context associated with the selected 
profile is retrieved in order to set up the desired 
execution environment as the logon progresses. 

Descending into block 33 0, the user agent is loaded 
in the context of the current profile. The user agent 
retrieves the status information for a first software 
feature from the global catalogue at block 333. A check 
is made at block 336 whether the current profile is 
allowed to have this software feature enforced (according 
to the content of the corresponding record in the 
authorisation list) . If not, the method descends into 
block 339 (described in the following) . Conversely, the 
method continues to block 342, wherein the status 
information for the same software feature in the context 
associated with the current profile is extracted from the 
user catalogue. 

The status information from the global catalogue and 
the status information from the user catalogue are 
compared at block 348. If no action is required the 
method passes to block 339 directly; for example, this is 
the case when the software feature results in the same 
status in the global catalogue and in the user catalogue 
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since the software feature has been already enforced in 
the context of the current profile, or when the global 
portion of a software product is not in a final status 
(such as in a back-up condition) . On the contrary, the 
method enters block 351. The instructions needed for 
aligning the software feature in the context associated 
with the current profile to the status set out in the 
global catalogue are retrieved from the stored packages, - 
the corresponding activity is then carried out under the 
control of the user agent. The status information for the 
software feature involved is accordingly updated in the 
user catalogue at block 3 54, and the method descends into 
block 339. Considering now block 339, the user agent 
verifies whether a last software feature in the global 
catalogue has been reached. If not, the method returns to 
block 333 for processing a next software feature. 

Conversely, the method passes to block 357, wherein 
the execution of the user agent is terminated and the 
other operations of the logon process are completed. 
Operation of the client workstation is now under the 
control of the user, which can run all the desired 
applications available in the context associated with the 
current profile. The method then proceeds to the 
decisional block 360. If the client workstation has been 
accessed with the privileged profile and the system 
administrator has chosen to edit the authorisation list, 
the selected operations (such as insert, delete or update 
records) are carried out at block 3 66; the method then 
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descends into block 369. Conversely, the method passes to 
block 369 directly. 

Considering now block 369, a check is made whether 
the user has entered a logoff command. If not, the method 
returns to block 357 (for processing further requests 
from the user) . On the contrary, if the user has closed 
the current session the method returns to block 32 7 
{waiting for a new logon or the shut down of the client 
workstation) . 

Likewise considerations apply if an equivalent 
method is performed, for example if the logon is carried 
out with a different procedure, if another memory 
structure is provided for storing an indication of the 
user activities included in the package and to be 
executed later on under the control of the user agent, if 
the user activities are retrieved and executed in the 
context associated with the current profile in a 
different manner, and so on. 

More generally, the present invention provides a 
method of distributing software features to a computer 
being accessible with a plurality of different user 
profiles each one associated with a corresponding 
operating context. The method includes the steps of 
providing a distribution package with one or more items 
indicative of an activity for enforcing a corresponding 
software feature on the computer; some of the activities 
are defined as user activities associated with one or 
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more user profiles. An indication of each user activity 
is stored on the computer. The computer is accessed with 
a current user profile; each user activity associated 
with the current user profile is then retrieved and 
executed in the corresponding operating context. 

The proposed solution allows specific software 
configurations to be deployed for the various profiles of 
the workstations. For example, some software products may 
be enabled only for certain users accessing the client 
workstation with selected profiles; moreover, customised 
configuration information (such as different operations 
to be executed automatically or shortcuts on a desktop) 
may be set for each profile. As a consequence, the method 
of the invention provides a very flexible solution for 
managing the software configurations of the client 
workstations in the network. 

In addition, the various software features are 
enforced in each context only when they are actually 
needed. In fact, in the method described above the user 
activities are retrieved and executed when the client 
workstation is accessed with the respective profile. 
Therefore, if a user does not log onto the client 
workstation, his or her profile is never updated. 

The preferred embodiment of the invention described 
above offers further advantages. For example, the 
distribution agent (running outside the context 
associated with the current profile) allows the global 
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activities to be executed irrespective of the user 
actually working with the client workstation. The user 
agent running in the context associated with the current 
profile makes it possible to execute the respective user 
activities without any security concern; moreover, the 
user activities are carried out during the logon process, 
so that the corresponding software features are 
automatically enforced each time the user logs onto the 
client workstation. In an advantageous embodiment of the 
present invention, the distribution agent runs with the 
client workstation in a logoff condition. In this way, 
the global activities may be executed even if no user is 
currently logged on the client workstation at the 
distribution time. 

Similar considerations apply if the distribution 
agent and the user agent perform equivalent routines, if 
the user agent is loaded after completion of the logon 
process, if the global activities and/or the user 
activities are not carried out automatically (for example 
if the user is prompted to accept the software features 
before they are enforced in the corresponding context) , 
and the like. Alternatively, the user agent is kept 
active for the whole current session; every time a new 
package is received and the global activities have been 
executed, the distribution agent notifies the user agent 
accordingly, so that the corresponding software features 
are enforced in the context associated with the current 
profile immediately. However, the solution according to 
the present invention leads itself to be implemented even 



GB920000117US1 



16 



with other modules, or without the possibility of running 
the distribution agent when the client workstation is in 
the logoff condition (for example requiring the 
administrator to be logged on for carrying out the global 
activities in the privileged context) . 

Advantageously, the method of the invention is used 
for deploying software products having a global portion 
and a user portion necessary for activating the software 
product in each context. In this way, the software 
products installed on the client workstation may be made 
visible only to the desired users. In a preferred 
embodiment of the invention, each activity is defined as 
a global activity or a generic user activity (without 
specifying any profile) . In this way, a simple flag is 
required in each item of the package. Moreover, the user 
activities are executed in each context according to a 
comparison between the global catalogue and the 
respective user catalogue; this ensures (in a simple and 
effective manner) that all the instructions included in 
the package are executed only once. The authorisation 
list further provides the possibility of identifying the 
profiles allowed to have each software feature enforced, 
so that the software products available to each user are 
configurable in a simple manner. 

Likewise considerations apply if the global and user 
activities are defined differently, for example 
associating a single flag to a container including two or 
more items of the package, if the global catalogue and 
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the user catalogue are replaced by equivalent memory- 
structures, if the status information for each software 
feature in the global catalogue and in the user catalogue 
are compared in a different manner, if a simple flag is 
stored for indicating the completion of a generic user 
activity in each context (in order to avoid its 
repetition later on in the same context) , and so on. 
Alternatively, the software features consist of a single 
portion to be installed in each desired context, each 
item of the package includes a field for associating the 
corresponding user activity with one or more profiles, 
the authorisation list only specifies the profiles 
allowed to have all the software products available 
(without the possibility of selecting specific software 
features for different profiles) , the user agent is 
loaded only for desired profiles allowed to have the 
software products available, or all the software features 
are always enforced in every context (as soon as the 
client workstation is accessed with the respective 
profile) . 

In a preferred embodiment of the present invention, 
the method is employed in a software distribution 
application for a network, wherein the software features 
are automatically deployed from the server workstation to 
the client workstations. Advantageously, the method 
proposed by the present invention is implemented with a 
computer program, which is provided on CD-ROM. 
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are compared in a different manner, if a simple flag is 
stored for indicating the completion of a generic user 
activity in each context (in order to avoid its 
repetition later on in the same context) , and so on. 
5 Alternatively, the software features consist of a single 

portion to be installed in each desired context, each 
item of the package includes a field for associating the 
corresponding user activity with one or more profiles, 
the authorisation list only specifies the profiles 

10 allowed to have all the software products available 

= (without the possibility of selecting specific software 

f features for different profiles) , the user agent is 

2 loaded only for desired profiles allowed to have the 

software products available, or all the software features 
-15 are always enforced in every context (as soon as the 

client workstation is accessed with the respective 

11 profile) . 

In a preferred embodiment of the present invention, 
20 the method is employed in a software distribution 

application for a network, wherein the software features 
are automatically deployed from the server workstation to 
the client workstations. Advantageously, the method 
proposed by the present invention is implemented with a 
25 computer program, which is provided on CD-ROM. 



Alternatively, the program is provided on 
floppy-disk, is pre-loaded onto the hard-disk, or is 
stored on any other computer readable medium, is sent to 
the client workstation through the network, is broadcast, 
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or more generally is provided in any other form directly 
loadable into a working memory of a computer. However, 
the method according to the present invention leads 
itself to be used in any data processing system having 
one or more computers (even if the computers are not 
connected to each other in a network and the packages are 
copied onto CD-ROMs that are manually distributed) , or to 
be carried out with a hardware structure installed on the 
client workstation (for example integrated in a chip of 
semiconductor material) . 

Naturally, in order to satisfy local and specific 
requirements, a person skilled in the art may apply to 
the solution described above many modifications and 
alterations all of which, however, are included within 
the scope of protection of the invention as defined by 
the following claims. 



